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Abstract: In order to achieve the security for the e-business 
application, generally, the organizations follow the 
cryptographic methods. The two widely accepted and used 
cryptographic methods are symmetric and asymmetric. The 
DES ideally belongs to the category of symmetric key 
cryptosystem and RSA, NTRU[3] belongs to the category of 
asymmetric key cryptosystem. NTRU (Nth degree truncated 
polynomial ring units) is a collection of mathematical 
algorithms based on manipulating lists of very small integers. 
NTRU is the first secure public key cryptosystem not based on 
factorization or discrete logarithmic problems. The keys are 
generated by having small potent polynomials from the ring 
of truncated polynomials. NTRU can also be implemented 
using matrices instead of polynomials [4, 5]. We proceed with 
the encryption and decryption of the plain text required by 
implementing the algorithms of both the approaches of NTRU 
cryptosystems. It is already shown that the matrix approach is 
algorithmically better than the polynomial approach of NTRU 
cryptosystem [5]. We propose and test both the methods for 
variable sized text files, using polynomial and matrix 
cryptosystems. This paper presents the comparative study of 
polynomial NTRU and matrix NTRU algorithms for variable 
sized text files as input. The final results were observed using 
Mathematica5.1, analyzed and compared so as to identify which 
method is appropriate to the business needs. 

KeyWords: Data Security, Encryption, Decryption, Polynomial, 
Matrix. 

I. Introduction 

The two major reasons which made Public-Key 
cryptographic algorithms more reliable are the areas of greater 
confidentiality, ease of key generation and authentication. 
These algorithms are based on mathematical calculations 
rather than substitutions and permutations like the symmetric 
cryptosystems. Further these algorithms use two keys in 
contrast to symmetric algorithms which uses only one key. 
Public-Key algorithms rely on one key for encryption and a 
different but related unique key for decryption.lt is 
computationally infeasible to determine the decryption key 
given only the knowledge of cryptographic algorithm and the 
encryption key. The two keys in Public-Key Cryptographic 
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algorithms are referred as public key and private key. Invariably 
the private key is kept secret and is only known to the user 
that holds it. In the subsequent sections, we present the 
implementations of polynomial based NTRU and lattice based 
NTRU systems for different text files and finally compare the 
computational running times to find the suitable method for 
the business applications. 

II. NTRU with Polynomial Approach 

The NTRU encryption system and the related signature 
scheme are both built on polynomial algebra. The basic objects 
are truncated polynomials [3, 7] in the ring 

R = Z[x] l(Z N — 1) and the basic tool is the reduction of 

polynomials with respect to two relatively prime moduli. The 
security of the systems is based on the difficulty of finding a 
"short" factorization for such polynomials. This latter problem 

is equivalent to finding a short vector in a certain 2N 
dimensional lattice, a commonly known and also widely 

studied hard problem. NTRU polynomials a(x) are 
frequently reduced modulo p and q , the small and large 
moduli. The large modulus q is an integer, and reduction of 

a(x) = a Q + a A x + ... + a n _ x x"~ x mo&q means just 

reduction of each a, modulo q . The small modulus p can also 
be an integer. It is required that p and q are relatively prime: 

gcd(p, q) = 1 .The main objects in the systems are "small" 

polynomials; i.e. polynomials with small coefficients, or 
polynomials with a small norm (Euclidean length of the 

coefficientvector). The public key h is defined by an 
equation f * h = pg (mod q) , where /and g are small 
polynomials. The polynomial / should always have inverses 
modulo p and q [3], 

f*fp = l(mod p) and / * fq = l(mod q) .Moreover, the 
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parameters /V > P ar, d Q are also public, and can be used as 
common domain parameters for all users. Polynomials / and 

g are private to the key owner. The polynomial g is needed 
only in key generation. 

Bob chooses two small polynomials / and g in the ring 
of truncated polynomials and keeps / and g private. He 
then computes fp and fq , where p and q are relatively 
prime to each other. He computes h = pfq * g(mod q) , which 
becomes the public key for Bob and the pair of polynomials 

/ and fp forms his private key pair. The message is also 
represented in the form of a truncated polynomial. Let it be 

m . 

Alice encrypts using the public key of Bob i,e, ]% as 
e = h * r + m(modq) , where r is a random polynomial 
basically used to obscure the message. This encrypted 
message may be sent in a public not secure channel. Bob 
decrypts the encrypted message using his private key pair 
by performing the following operations: 

a = f * e(modg) 
b = a(mod p) 

c = fp * fc(mod p) , c is the original message, 

As c = fp * [/ * (pfq * g * r + m)](mod q)(mod p) = m using the 

identities f*fp = l(mod p) and f*fq = l(mod q) . 

A. NTRU Encryption 

Alice has a message to transmit to Bob. Alice first puts 
the message in the form of a polynomial m whose coefficients 

are chosen modulo p , say , between — p II and p 1 2 .Next 

Alice randomly chooses another small polynomial r ■ This is 
the binding value which is used to obscure the message. She 
uses the message m, randomly chosen polynomial y , and 

Bob's public key ]\ to compute the polynomial 

e = h* r + ra(mod q) . The polynomial e is the encrypted 
message which Alice sends to Bob. 
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A. NTRU Decryption 

Bob has received Alice's encrypted message e and Bob 
wants to decrypt it. He begins by using the private polynomial 
/ to compute the polynomial a = f * e(mod q) and chooses 
the coefficients of a to lie between -ql2 and ql2 .In general 
Bob will choose the coefficients of a to lie in an interval of 
length q .The specific interval depends on the form of the 
small polynomials. It is very important that he does this before 
performing the next step. He next computes the polynomial 
b = a(mod p) . That is, he reduces each of the coefficients of 
a modulo p . Finally he uses the other private polynomial 
fp to compute c = fp* Z?(mod p) . The polynomial c will be 
Alice's original message m. The decryption procedure is 
executed by the following three steps : 

a = f * e(mod q) 
b = a(mod p) 
c = fp* fo(mod p) 



TableI.II. Polynomial Decryption 
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III. NTRU with Lattice Approach 

Let be a m-dimensional Euclidean space . A lattice [4] in 
f>™ is a set of integers combinations 
L(b l ,b 2 ,-,b n ) = {TlU x i b i : e z for 1 ^ i ^ ") for « linearly 
independent b x ,b 2 ,...,b n in (m >n). The integers' m 
and n are called rank and dimension of the lattice respectively. 

A basis can be represented by the matrix 

B = [ft, , b 2 b n ] e R" u " having the basis 1(B) = {Bx : x s Z" } , 

where Bx is the usual matrix multiplication. Each £>, 

represents a column of a matrix. In matrix notation z m = 1(1) , 

where / g % '«« is the n-dimensional identity matrix i.e., n x n 
square matrix with l's on the diagonals and 0's everywhere. 
When n = m i.e., the number of basis vectors equals the 
number of coordinates, we say that 1(B) is of full rank or full 

dimensional. Equivalently, lattice /(B) <= r" is full rank if and 
only if the linear span of the basis vector 
(B) = {Bx : x e R" } equals the entire space jj" . 
So B, an n x n matrix defined as 

\ 



This represents some points in a n X n space of real numbers. 
Let p be an integer. Then we define B (mod p) as 



a=B(moip) = 



b^moip) ■■■ b tm (modp)_ 

This represents some points in a n x n space of positive 
integers. A matrix and congruence with the same modulus 
maybe added, subtracted, and multiplied just as is done with 
matrix operations[4,5] . 

Bob creates a public/private key pair. He first randomly 
chooses two matrices x and Y > where matrix x should be 
an invertible matrix (modulus p and q ). He keeps the matrices 
X and y private, since anyone who knows either one of 
them will be able to decrypt messages sent to Bob. He compute 
the inverse of X(mod q) and the inverse of X(mod p) . Thus 
he computes matrix Xq and Xp which satisfies 
X * Xp = /(modp) and X * Xq = I(modq) . Bob can ensure the 
existence of inverse of matrix x by checking x is non- 
singular and x is invertible mod p (i.e. det[X](modp) * 0). 
Otherwise he needs to go back and choose another matrix 
X ■ Now Bob computes the product H = pXq * y(mod q) . His 
private key is the pair of matrices x an d Xp and his public 
key is the matrix // . 



A. NTRU with Lattice Encryption 

Alice wants to send a message to user Bob using his 
public key h ■ Alice first puts her message in the form of a 
binary matrix m > (which is a matrix of same order as x and 
Y ) whose elements are chosen mod p . Next, A randomly 
chooses another matrix R of the same order as x ■ This is the 
"blinding value", which is used to obscure the message 
(similar to the way that the ElGamal algorithm uses a onetime 
random value when encrypting). To send message m > Alice 
chooses a random matrix b (which is of same order as matrix 
X ), and Bob's public key // to compute the matrix 
E = [H * R + M](modq) .The matrix e is the encrypted 
message which Alice sends to Bob. 

Table I. III. Lattice Encryption 
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B. NTRU with Lattice Decryption 

Now Bob has received Alice's encrypted message e and 
he decrypts it. He begins by using his private matrix x to 
compute the matrix. A = X *E(modq) . Bob next computes 
the matrix B = A(mod p) . Finally Bob uses his other private 
matrix Xp to compute C = Xp* B(mod p) . The matrix c will 
be Alice's original message m ■ 
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Table l.IV. Lattice Decryption 
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IV. Comparison 

NTRU cryptosystem is a technique to encrypt/decrypt 
block of data. It uses Truncated Polynomials for encryption 
and decryption. In this paper we have used matrices in place 
of truncated polynomials. We have compared 7-bit polynomial 
with 3x3 matrix (9-bit), 1 1 -bit polynomial with 4x4 matrix(16- 
bit) and polynomial with degree 17 and 29 with 5x5 matrix (25- 
bit). Although the matrix approach has more bits compared 
to that of corresponding polynomial approach, it is observed 
that encryption/ decryption times are faster. 

The following graphs clearly show that the lattice 
approach of NTRU is faster than that of polynomial approach 
of NTRU cryptosystem. 
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V. Conclusion 

In this paper it is shown that the lattice approach of NTRU 
cryptosystem is computationally faster than that of 
polynomial approach. Hence this method is suitable to send 
large messages. Also it is more secure since matrices are non 
commutative. There is no easy method to know whether a 
polynomial is invertible or not. We can use this method as a 
matrix is invertible only when it's determinant is found. With 
an improved algorithm for matrix multiplication these results 
can further be optimized. We can choose different types of 
lattices to further improve the complexity. 
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